General

  • Target

    1728-64-0x000000000041F070-mapping.dmp

  • Size

    369KB

  • MD5

    e289a1f4f0ae88ca9fc265dfc995a2e1

  • SHA1

    b69dfc851278387c33f81d0bb9cd4b6b82e8c519

  • SHA256

    cf6fc84d57ffaabed3a75b6085576eec6be5a8f9c7e8df4c699aeb132a2fa069

  • SHA512

    aa1e53ace7a4081584b3a77b32833eb1cdd9a907d1120e1af1a2d30d07f45a2a0bbf5f917b233e7eaaab51737a0043f356b2b067d869a3f0bffc196c857eac4b

  • SSDEEP

    6144:mpcFnUQq+XsuNNy+kZWqzPpcFnUQq+XsuNNy+kZWqz0:pFnqQNNIZjzuFnqQNNIZjz0

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

cy30

Decoy

viveksirclass.com

lotuscounselingsc.com

thompsonlaws.com

theinterviewworkout.biz

brofjoc.online

euheimr.net

dealresort.xyz

betforwar.com

tayogas.com

redhotcellopeppers.com

shoujigushi.com

jounan-lp.com

womensminitournaments.com

003523.com

fuyeku.com

powerenergyshop.com

99334633.xyz

army-construccion.com

superiorpipemaintenance.com

clientpods.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 1728-64-0x000000000041F070-mapping.dmp